Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/323830343a313137303a383030303a3a2f34382d3438203d3e20323633363736.roa
File:                     323830343a313137303a383030303a3a2f34382d3438203d3e20323633363736.roa (raw, json)
Hash identifier:          wxyS/pBRtUhZXjWWjYvUHH6IbGFKMkYauh9TPx/gpk8=
Subject key identifier:   F3:6A:A3:F7:52:B7:CA:E8:A2:84:E6:E7:D0:70:5F:FF:88:1E:37:78
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       59220008161DDED234752AF6CB4C6C9E0511DBFE
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/323830343a313137303a383030303a3a2f34382d3438203d3e20323633363736.roa
Signing time:             Tue 01 Jul 2025 23:23:23 +0000
ROA not before:           Tue 01 Jul 2025 23:18:23 +0000
ROA not after:            Tue 30 Jun 2026 23:23:23 +0000
asID:                     263676
IP address blocks:        2804:1170:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 18:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:22:00:08:16:1d:de:d2:34:75:2a:f6:cb:4c:6c:9e:05:11:db:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: Jul  1 23:18:23 2025 GMT
            Not After : Jun 30 23:23:23 2026 GMT
        Subject: CN=F36AA3F752B7CAE8A284E6E7D0705FFF881E3778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:d7:f6:13:a8:36:1a:ab:e4:6f:b7:a5:fa:
                    aa:c1:fe:a9:e0:e9:40:e4:e9:a7:b0:02:85:03:b3:
                    e4:21:ad:bb:12:30:71:68:9f:b3:24:bc:90:6a:b0:
                    e3:49:13:db:dc:b5:57:08:f9:40:6a:40:b7:ca:06:
                    cf:7c:df:4a:62:69:59:3a:da:ff:f2:5b:22:3c:b1:
                    61:bb:19:f4:75:96:25:98:0c:ce:fc:82:66:92:e9:
                    ff:b0:70:f8:a6:b6:aa:09:a4:84:8a:97:03:f3:3c:
                    e9:5c:2a:29:81:3c:25:e1:45:c6:3b:40:76:4a:77:
                    1d:ce:07:3c:d0:0a:b9:3c:fc:26:13:04:d7:cd:25:
                    7a:24:1b:52:40:f9:96:19:49:b6:a1:8f:c6:0f:0c:
                    b8:ef:51:1e:3b:80:e7:da:3e:0c:6d:d9:a1:16:a1:
                    8f:24:08:84:d2:8c:ad:79:56:70:32:a0:bf:66:52:
                    a1:ed:b5:45:d0:44:fb:a8:d6:1e:69:2b:01:c9:6d:
                    da:04:40:84:53:ea:f6:e9:c3:32:3a:7a:b0:f0:19:
                    2f:69:60:e6:dc:c7:68:0d:f9:68:cb:77:dc:c7:0f:
                    43:74:b0:ee:20:04:c2:5e:c0:9d:d6:d7:70:a4:15:
                    4f:ce:75:a3:46:eb:5d:de:6d:4f:4f:fe:22:bd:9e:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6A:A3:F7:52:B7:CA:E8:A2:84:E6:E7:D0:70:5F:FF:88:1E:37:78
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/323830343a313137303a383030303a3a2f34382d3438203d3e20323633363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1170:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:f9:c6:74:00:37:50:a8:58:2c:1f:6f:22:d8:cb:f6:95:
         2a:80:78:2d:5c:dd:4e:da:56:0f:81:63:84:65:f6:46:07:1d:
         b3:06:a7:3a:5e:45:17:6d:0a:84:94:f1:68:f6:43:ce:84:a8:
         a7:f4:3f:84:f8:f8:8c:af:2d:7a:cf:df:b4:96:58:ba:91:d3:
         cd:4f:2a:df:93:77:9c:48:66:7e:e4:e3:6f:96:28:8a:0a:97:
         88:3e:3a:c2:44:61:19:5e:69:59:9f:54:b8:f4:c0:e1:7d:59:
         68:72:be:b3:a2:fb:6d:39:58:f4:80:62:8e:64:45:36:57:3d:
         13:c6:7f:5a:cf:1b:e1:b5:a9:b7:7d:53:68:bf:d9:9d:30:39:
         b0:51:1a:37:2e:06:44:1f:89:af:2e:6e:93:3c:c7:e7:dc:bb:
         c1:64:74:28:e7:ba:b4:16:ee:4d:2a:6c:7c:52:6e:c3:3a:a9:
         1b:c8:80:2c:13:d1:26:3f:69:db:79:01:bc:b3:a0:78:cd:ba:
         0d:4f:20:ef:92:e3:3b:90:69:37:d3:ff:81:83:00:a6:44:b0:
         63:e7:af:d0:95:7e:1a:0f:37:c4:c9:e7:41:7e:94:4d:1a:21:
         19:be:16:d5:2d:d7:77:d3:93:23:ea:da:7c:59:f5:e3:6f:a6:
         b4:76:8e:e2
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUWSIACBYd3tI0dSr2y0xsngUR2/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyNTk4NEQ3MTg1ODM2OTlFNkY5ODAyN0Q0NkM0RjA2
NEZFRDFBODAeFw0yNTA3MDEyMzE4MjNaFw0yNjA2MzAyMzIzMjNaMDMxMTAvBgNV
BAMTKEYzNkFBM0Y3NTJCN0NBRThBMjg0RTZFN0QwNzA1RkZGODgxRTM3NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkNf2E6g2Gqvkb7el+qrB/qng
6UDk6aewAoUDs+QhrbsSMHFon7MkvJBqsONJE9vctVcI+UBqQLfKBs9830piaVk6
2v/yWyI8sWG7GfR1liWYDM78gmaS6f+wcPimtqoJpISKlwPzPOlcKimBPCXhRcY7
QHZKdx3OBzzQCrk8/CYTBNfNJXokG1JA+ZYZSbahj8YPDLjvUR47gOfaPgxt2aEW
oY8kCITSjK15VnAyoL9mUqHttUXQRPuo1h5pKwHJbdoEQIRT6vbpwzI6erDwGS9p
YObcx2gN+WjLd9zHD0N0sO4gBMJewJ3W13CkFU/OdaNG613ebU9P/iK9ntSNAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU82qj91K3yuiihObn0HBf/4geN3gwHwYDVR0j
BBgwFoAUHiWYTXGFg2meb5gCfUbE8GT+0agwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZrd0Z2QU50VVNDQlZKTG1UREJDb0pTQ2NvZEtzc29hQUwyNGd6bVM1
cWsvMC8xRTI1OTg0RDcxODU4MzY5OUU2Rjk4MDI3RDQ2QzRGMDY0RkVEMUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFMjU5ODRENzE4NTgzNjk5
RTZGOTgwMjdENDZDNEYwNjRGRUQxQTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGa3dGdkFOdFVTQ0JWSkxtVERCQ29KU0Njb2RLc3NvYUFMMjRnem1TNXFrLzAv
MzIzODMwMzQzYTMxMzEzNzMwM2EzODMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMzM2MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEEXCAADANBgkqhkiG9w0BAQsF
AAOCAQEAIvH5xnQAN1CoWCwfbyLYy/aVKoB4LVzdTtpWD4FjhGX2RgcdswanOl5F
F20KhJTxaPZDzoSop/Q/hPj4jK8tes/ftJZYupHTzU8q35N3nEhmfuTjb5YoigqX
iD46wkRhGV5pWZ9UuPTA4X1ZaHK+s6L7bTlY9IBijmRFNlc9E8Z/Ws8b4bWpt31T
aL/ZnTA5sFEaNy4GRB+Jry5ukzzH59y7wWR0KOe6tBbuTSpsfFJuwzqpG8iALBPR
Jj9p23kBvLOgeM26DU8g75LjO5BpN9P/gYMApkSwY+ev0JV+Gg83xMnnQX6UTRoh
Gb4W1S3Xd9OTI+rafFn142+mtHaO4g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:22 2025 by rpki-client